Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275783.roa
File: AS275783.roa (raw, json)
Hash identifier: JEP0h0BTKfd4Q6npPkhrNUfN4pcDny4EC3e9alD9GFg=
Subject key identifier: 6E:01:89:D5:53:F3:C6:38:9D:F2:EE:69:0D:6E:AA:8F:E5:47:8F:E3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 709429BDF41CE1F62B72E9FB25D94446717863B4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275783.roa
Signing time: Wed 15 Jul 2026 14:57:34 +0000
ROA not before: Wed 15 Jul 2026 14:52:34 +0000
ROA not after: Wed 14 Jul 2027 14:57:34 +0000
asID: 275783
IP address blocks: 188.220.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:94:29:bd:f4:1c:e1:f6:2b:72:e9:fb:25:d9:44:46:71:78:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 15 14:52:34 2026 GMT
Not After : Jul 14 14:57:34 2027 GMT
Subject: CN=6E0189D553F3C6389DF2EE690D6EAA8FE5478FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:f2:4d:a5:b2:97:7f:4d:07:fd:10:94:9f:
42:db:72:3f:3d:1b:8f:0e:cc:74:e5:b5:05:23:57:
72:77:ec:0e:44:f0:9b:29:5d:5a:ff:83:29:da:e7:
32:ef:b1:24:28:2e:5c:a7:06:b8:95:0a:ab:f4:4f:
87:fd:83:77:88:fb:b0:6f:fc:5d:89:0e:09:f0:fa:
50:13:1d:54:fd:65:ed:e9:9b:f8:8d:50:81:bb:b3:
81:c4:52:1a:9f:03:e7:19:69:b6:28:e6:a5:71:dc:
00:c4:2e:9e:37:e3:80:96:d9:2f:b5:38:e6:5e:4c:
18:ba:86:46:76:e7:1e:62:5e:99:f9:51:19:53:8a:
a6:77:a0:31:8b:b4:4f:e0:9d:8b:a6:3b:f9:d8:c8:
c5:e4:b9:11:3f:91:5f:ce:bf:69:6c:14:a8:95:68:
ae:46:e9:e3:4a:3c:2d:13:31:18:45:e6:69:ab:7c:
cd:e7:c2:ad:40:47:04:b4:31:2a:fb:08:71:de:be:
5e:3c:c5:4c:03:d3:51:d9:e1:e6:ce:57:b0:8a:14:
6f:3a:b3:ab:c9:7a:69:30:30:7c:e8:ed:14:16:9f:
82:f1:8b:f1:e4:8a:fc:ef:5c:5f:1b:7b:1b:6e:6a:
4c:46:0c:27:60:5a:1d:0a:74:7e:41:14:e5:31:9c:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:89:D5:53:F3:C6:38:9D:F2:EE:69:0D:6E:AA:8F:E5:47:8F:E3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS275783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:db:20:9c:34:7f:69:b3:21:51:ec:ed:b2:96:0f:de:56:9d:
01:74:c0:53:e4:78:d8:76:8f:da:b6:14:7d:a1:58:f2:97:25:
1f:da:8a:4c:81:91:b5:25:13:ec:8b:0f:aa:0c:60:84:48:c6:
a5:86:6b:09:35:1b:39:46:19:03:c8:5a:42:c7:3c:f3:2b:29:
23:18:95:93:c4:ea:32:19:e3:e7:32:d8:3e:67:69:cb:5e:6a:
43:ef:ee:14:15:cc:86:cd:1f:82:fa:08:ab:4a:90:8b:c4:a9:
33:26:6f:ad:cc:30:fb:a1:9a:bc:14:09:4c:f0:71:67:f0:9f:
65:90:48:cb:5b:d6:99:2f:cf:8f:ee:17:8f:28:bc:b6:8e:a2:
8e:9e:6a:49:ad:5d:ee:a7:67:5b:3a:16:f7:20:2c:df:f9:c0:
3f:c5:62:96:1e:74:db:1b:4c:38:1e:4e:df:ec:c9:17:7d:6a:
64:f7:89:1e:cf:32:7d:ac:b9:bc:1a:35:12:b1:bc:d4:de:6e:
28:17:20:fd:1b:9f:c2:db:b8:9e:fe:5e:65:e5:19:53:dd:e7:
9e:13:e4:be:25:ef:ce:b4:63:66:f5:90:8f:d5:3e:de:8e:0b:
75:ad:7c:89:87:c2:ee:b3:53:91:0e:7d:7d:61:94:00:0d:b7:
91:7b:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:35 2026 by rpki-client